Protected by encrypted sessions and optional two-factor authentication · Security